CVE-2025-57896: WordPress Church Admin Plugin <= 5.0.26 - Broken Access Control Vulnerability
Missing Authorization vulnerability in andymoyle Church Admin allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Church Admin: from n/a through 5.0.26.
Other sources
Missing Authorization vulnerability in andymoyle Church Admin church-admin allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Church Admin: from n/a through <= 5.0.26.
— MITRE
Affected Software
Remediation
Information
Event History
Frequently Asked Questions
What is the severity of CVE-2025-57896?
CVE-2025-57896 has a moderate severity rating due to its potential for unauthorized access.
How do I fix CVE-2025-57896?
To fix CVE-2025-57896, update your Church Admin software to version 5.0.27 or later.
Who is affected by CVE-2025-57896?
CVE-2025-57896 affects users of Church Admin versions up to and including 5.0.26.
What type of vulnerability is CVE-2025-57896?
CVE-2025-57896 is classified as a Missing Authorization vulnerability.
Is CVE-2025-57896 an issue in WordPress?
Yes, CVE-2025-57896 also affects the WordPress Church Admin Plugin up to version 5.0.26.